Skip to content

Commit e20be23

Browse files
authored
[client] Add missing peer ACL flush (#3247)
1 parent 46766e7 commit e20be23

File tree

1 file changed

+5
-0
lines changed

1 file changed

+5
-0
lines changed

client/firewall/nftables/acl_linux.go

+5
Original file line numberDiff line numberDiff line change
@@ -348,6 +348,10 @@ func (m *AclManager) addIOFiltering(
348348
UserData: userData,
349349
})
350350

351+
if err := m.rConn.Flush(); err != nil {
352+
return nil, fmt.Errorf(flushError, err)
353+
}
354+
351355
rule := &Rule{
352356
nftRule: nftRule,
353357
mangleRule: m.createPreroutingRule(expressions, userData),
@@ -359,6 +363,7 @@ func (m *AclManager) addIOFiltering(
359363
if ipset != nil {
360364
m.ipsetStore.AddReferenceToIpset(ipset.Name)
361365
}
366+
362367
return rule, nil
363368
}
364369

0 commit comments

Comments
 (0)